Frame 17761: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:11.756382000 UTC UTC Arrival Time: Jul 22, 2017 02:51:11.756382000 UTC Epoch Arrival Time: 1500691871.756382000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000117000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 457.231033000 seconds] Frame Number: 17761 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x6be3 (27619) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x2fc4 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49194, Seq: 275094, Ack: 1475, Len: 1352 Source Port: 80 Destination Port: 49194 [Stream index: 79] [Stream Packet Number: 419] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 275094 (relative sequence number) Sequence Number (raw): 4187323461 [Next Sequence Number: 276446 (relative sequence number)] Acknowledgment Number: 1475 (relative ack number) Acknowledgment number (raw): 2526152589 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1033 [Calculated window size: 33056] [Window size scaling factor: 32] Checksum: 0x0c2c [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.219477000 seconds] [Time since previous frame in this TCP stream: 0.000117000 seconds] [SEQ/ACK analysis] [iRTT: 0.076622000 seconds] [Bytes in flight: 6760] [Bytes sent since last PSH flag: 56784] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 2b 45 6a ad a0 b6 ab ea a8 ad ae 8c f4 dd 55 f3 +Ej...........U. 0010 64 d7 be 73 e2 3e b9 1d 3c 7b 98 7f ff 69 e1 83 d..s.>..<{...i.. 0020 37 4b 5f 7e 56 fe f2 b3 ca 9c a6 69 86 01 0e 08 7K_~V......i.... 0030 00 e4 b8 8e 3b fb cf 71 10 86 4c cb d2 0d 84 21 ....;..q..L....! 0040 e5 1c 86 78 ec 86 ce 30 84 7c 90 40 18 64 c9 68 ...x...0.|.@.d.h 0050 29 a9 ab a9 9e ae 61 0c e9 e7 00 a4 7a f0 23 04 ).....a.....z.#. 0060 a0 d9 fe 10 48 d0 2c 4f 19 84 ea e6 a1 2e 03 61 ....H.,O.......a 0070 c8 e4 c8 7c 45 54 c4 d3 16 59 87 94 ef 90 79 4f ...|ET...Y....yO 0080 39 63 d0 0c 40 31 02 90 01 00 4a 1c 3b 76 dd d8 9c..@1....J.;v.. 0090 f3 f2 5e 10 41 ec e5 e7 43 40 8f 9f f8 7e 01 14 ..^.A...C@...~.. 00a0 04 a5 f3 f9 20 0e 7a 25 c0 0e ca 0b 41 04 96 12 .... .z%....A... 00b0 79 81 4c ae c5 2b 8f 68 08 8c c8 12 a4 1c 5e ae y.L..+.h......^. 00c0 41 88 43 52 45 78 d5 58 e6 8c 44 64 66 1b aa 73 A.CREx.X..Ddf..s 00d0 85 2d 12 cd d0 2c cf 89 b2 02 9d 33 04 5b aa e6 .-...,.....3.[.. 00e0 1c 1e 5d fd fe af fc f0 a5 cf 5d d0 74 e7 ce dd ..].......].t... 00f0 87 10 44 a0 52 9b 9c a8 d0 8c 4a 03 67 79 89 61 ..D.R.....J.gy.a 0100 34 34 a5 9d a3 52 29 88 79 e1 2b c8 14 f8 7b 21 44...R).y.+...{! 0110 50 f5 82 66 45 b2 e6 8a 8a 92 a5 20 16 13 16 d2 P..fE...... .... 0120 6a 8e 16 52 69 29 87 a2 b9 40 95 21 04 ab 07 6e j..Ri)...@.!...n 0130 43 95 6a 8e 50 29 2a 41 41 75 f2 56 6b 30 30 f4 C.j.P)*AAu.Vk00. 0140 b6 61 34 35 ad a1 eb 2d 4d 6b 6a 7a 43 d5 1a a6 .a45...-MkjzC... 0150 d1 51 b5 ba ac 46 14 ab b1 a2 c9 d0 e9 c7 77 8e .Q...F........w. 0160 e6 2f cc 49 3c ef 98 05 b8 d0 9e a7 03 bd bf fc ./.I<........... 0170 d5 9f bb 76 e7 8a 6d f3 bd 5e b9 d1 48 4c 5f 2f ...v..m..^..HL_/ 0180 97 a2 76 af b3 b2 be 59 2c 97 c2 d8 7d fc e4 8e ..v....Y,...}... 0190 e3 0a 7a a1 ae 84 05 c1 2f 2a 49 5d 2e d4 f9 b0 ..z...../*I].... 01a0 68 86 45 e0 7f 31 48 5a c5 62 e0 18 15 38 e7 6e h.E..1HZ.b...8.n 01b0 d9 90 d4 eb eb 95 62 c4 ae 9f ac 6d 9e 5c b5 05 ......b....m.\.. 01c0 3d 71 c2 62 92 d4 6c ff f6 e6 e8 e6 fa e2 3b 37 =q.b..l.......;7 01d0 f6 3f b8 73 fc a5 db 07 df 78 72 fd d9 e1 ee 37 .?.s.....xr....7 01e0 9e de fd e0 de de bf fd 97 7f f8 bf fc db 7f 7e ...............~ 01f0 e1 e2 dc 9d 5b c7 6f bf 7d eb 17 3e 7a f0 47 3f ....[.o.}..>z.G? 0200 fe e8 df fc e4 bb 2f bf 72 49 53 04 45 02 ea 30 ....../.rIS.E..0 0210 d0 6d c0 f9 85 c8 57 92 14 11 1c 10 83 f7 ad 17 .m....W......... 0220 24 1c 9a a1 65 62 70 00 61 b7 c8 4b e0 17 66 8f $...ebp.a..K..f. 0230 9c 04 af 93 01 03 8a 2c 25 c3 6b 38 ce 0b 6e 0d .......,%.k8..n. 0240 10 0f 98 93 2c 5c 6a d8 3c 0f 17 80 8e 04 0c 3a ....,\j.<......: 0250 d5 f9 3c d1 79 4e 7d 9c 44 e8 46 a6 58 6b b2 7e ..<.yN}.D.F.Xk.~ 0260 24 eb 09 dc ce b5 72 7b 34 1e 5a 66 38 e9 ec af $.....r{4.Zf8... 0270 b6 17 6f 6d b7 ef 6d f5 de bb bd bd dd 0e ae 2d ..om..m........- 0280 d5 ee 6f f7 6f ae b6 1e ed 4e de 38 5e bd b9 d2 ..o.o....N.8^... 0290 de eb 26 af 1f ad 9c 8c 0b d7 47 ad fb 1b dd 7b ..&.......G....{ 02a0 07 6d 54 28 37 97 e3 d3 4c 66 4e 7f f7 71 fd 1b .mT(7...LfN..q.. 02b0 5f 7a e5 37 7e b9 ff 3b df e7 fe df ff eb e0 77 _z.7~..;.......w 02c0 7f fb f2 93 63 f1 de 76 ab 95 67 f2 c1 29 83 8a ....c..v..g..).. 02d0 ed 56 b9 db ab f5 47 c0 a0 ce 70 ad 3f dc 1a 8d .V....G...p.?... 02e0 f6 17 47 47 60 82 56 50 94 77 7d b5 7f 63 b5 87 ..GG`.VP.w}..c.. 02f0 d5 bd be 82 74 e3 13 22 af 5f c7 3c 22 30 02 50 ....t.."._.<"0.P 0300 02 86 20 1c db 19 d6 36 ba 95 e5 16 44 d0 71 b7 .. ....6....D.q. 0310 04 11 a0 5b 8d ec 72 68 94 23 ad 1a 6b cd 92 da ...[..rh.#..k... 0320 6f a8 d3 be b6 b9 a4 1f 6e 99 b7 8e ed 47 37 dd o.......n....G7. 0330 b7 1e 04 ef 3d 8d be f4 2c fe e8 f3 c5 af be 5b ....=...,......[ 0340 02 cd 69 10 70 19 00 1b 70 40 c0 1e cf f3 7c cf ..i.p...p@....|. 0350 f5 e1 00 78 64 5b 10 46 58 d0 49 1a 2a 9a 48 ab ...xd[.FX.I.*.H. 0360 4b 8a 26 ca 9a 20 cf 30 44 52 d4 b8 da b4 21 08 K.&.. .0DR....!. 0370 a8 9a bd 2c 21 2b 74 0e 43 a7 00 42 0c c2 3b fc ...,!+t.C..B..;. 0380 10 00 61 06 89 67 0c e2 2d 8e 3b ab dd 39 9b dc ..a..g..-.;..9.. 0390 8e eb 28 ce 4a 29 22 0c 11 06 9d 99 20 00 90 0a ..(.J)"..... ... 03a0 00 4a 2c 23 b1 4d 00 50 e2 3a 89 e7 c5 7e 10 fb .J,#.M.P.:...~.. 03b0 61 3e c8 47 41 1c 42 33 f0 8b be 5f f2 fc 92 1f a>.GA.B3..._.... 03c0 54 c9 92 eb d3 b2 0f 39 16 7c 10 9e 48 92 49 a5 T......9.|..H.I. 03d0 73 99 6c 36 9d a1 b2 39 32 db 10 7c 3e 88 63 59 s.l6...92..|>.cY 03e0 32 4c 96 cd a4 ce 4c d0 d9 94 45 30 47 c4 25 11 2L....L...E0G.%. 03f0 bb 04 3e 1b bd 2e f0 99 6c 06 ac 10 07 a7 45 b7 ..>.....l.....E. 0400 e3 a4 cc b0 e2 8f 7f fb ef 5d bc 94 82 18 e2 d2 .........]...... 0410 a5 94 ae 5a 9a a8 03 86 2c 55 77 64 08 02 21 ec ...Z....,Uwd..!. 0420 42 f3 a7 21 f8 02 f4 bc f3 f8 c9 52 af cf cc 2f B..!.......R.../ 0430 c8 39 ca 95 94 44 35 1c 56 08 20 50 a6 18 39 93 .9...D5.V. P..9. 0440 03 06 c1 a3 9c a5 84 4c d6 91 14 5f 91 63 4d ad .......L..._.cM. 0450 b8 66 49 01 4f 94 7d 70 ff 4a 50 f0 86 d3 1d dd .fI.O.}p.JP..... 0460 2c 6a 5a 5b d7 db 9a d6 52 55 20 51 4b 33 ea aa ,jZ[....RU QK3.. 0470 da 30 8c 8e ef 0f 6d b7 2e 6b 5e 8e 55 16 2e bd .0....m..k^.U... 0480 fa 0b 5f fb 99 27 0f ae 35 6b 00 31 cf 34 4c d7 .._..'..5k.1.4L. 0490 33 c0 35 0d 07 63 c7 e3 bf f6 b5 77 ef df bf 7a 3.5..c.....w...z 04a0 f5 ea 4e 21 f1 a3 08 7c 4b b1 d5 eb 56 ea e5 20 ..N!...|K...V.. 04b0 ef dc 7b 70 c3 f3 29 c9 8b b5 7c 41 f2 c1 fe 54 ..{p..)...|A...T 04c0 f5 52 4b 89 2b 76 5c b6 dd a8 12 97 cb 71 3e 70 .RK.+v\......q>p 04d0 cc 66 92 cf b2 b2 25 6b cb f5 70 d0 8c 36 4e f6 .f....%k..p..6N. 04e0 0e 6e df b4 04 a5 ec 85 e0 55 9b 10 23 b3 a9 f5 .n.......U..#... 04f0 66 e9 fd 1b fb 1f dd 3b f8 c5 c7 47 df 7d 7a e5 f......;...G.}z. 0500 c7 5f 79 f7 c3 db 87 bf f3 cd 2f fd f7 ff ea 9f ._y......./..... 0510 fd 57 7f fa fb 17 5f fd dc b7 bf fb b3 df fc d6 .W...._......... 0520 97 be f9 b5 b7 fe c5 1f fd e8 97 de bd 2e 4a bc ..............J. 0530 ae 49 70 3b aa 88 3d 68 28 05 00 04 dc 81 47 82 .Ip;..=h(.....G. 0540 15 e0 0e 8f f6 49 e1 08 .....I.. Data […]: 2b456aada0b6abeaa8adae8cf4dd55f364d7be73e23eb91d3c7b987fff69e183374b5f7e56fef2b3ca9ca66986010e0800e4b88e3bfbcf7110864ccbd20d8421e51c8678ec86ce30847c90401864c96829a9aba99eae610ce9e700a47af02304a0d9fe1048d02c4f1984eae6a12e0361c8e [Length: 1352]